VulnSea

git-for-windows has 3 CVEs on record between 2023 and 2026. 2 were published in the last 90 days. The median CVSS is 4.4 (medium).

CVEs per month

Last 12 months, by publish date

120102030405060708091011
Exploited share
0% vs 1% corpus
Median CVSS
4.4
Publish → KEV
—
Last 90 days
2 prev 0

Products

  • git 3
Follow git-for-windows:RSS feedSave a search →Embed badge ↗
3
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

git-for-windows vulnerabilities

CVEs affecting git-for-windows, newest first. Open any entry for full detail, references, and exploit status.

3 CVEsRSS

CVE-2026-100407Medium· 4.4PoC
2d ago

Git for Windows: git-credential-wincred OAuth Store Heap Overflow

Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store operation in contrib/credential/wincred/git-credential-wincred.c uses _scwprintf() to size a formatted wide-charac…

▾ Twilightgit-for-windows · gitEPSS 0.12%via CVEORG
CVE-2026-100408Medium· 4.4
2d ago

Git for Windows: git-credential-wincred Erase Path Heap Overflow

Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git:* credential exists in Windows Credential Manager and a git-credential-wincred erase input includes a password field, the opera…

▾ Sunlitgit-for-windows · gitvia CVEORG
CVE-2023-25815Low· 3.3
3y ago

Git looks for localized messages in the wrong place

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW…

▾ Sunlitgit-for-windows · gitEPSS 0.84%via CVEORG
git-for-windows vulnerabilities (CVEs) · VulnSea